These are some of the many items that Active Directory does and probably did first. * [Delete Tree Control|Subtree Delete Control|target='_blank'] * [LDAP Query using a bitwise filter|http://support.microsoft.com/kb/269181|target='_blank'] * [LDAP Query using a bitwise filter]